The Data Security Law ("DSL"), enacted on 10th June
2021 has entered into force on 1st September this year.
China's framework legislation on data is coming to
completion. It started with the establishment of principles and
directions applicable to network security (with the Cybersecurity
Law in 2017).
It is now proceeding with the principles established to govern
data security and will then be completed with the Personal
Information Protection Law ("PIPL") recently set to come
into effecton 1st November this year.
These three pieces of legislation can be considered the backbone
of China's rules on data and data processing. Although
secondary legislation has been announced for the DSL and the PIPL
and is expected to be issued in the forthcoming weeks and months,
the basic principles are laid down.
